Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9qa0lfnRHt18P86Ad0hKmcZMsy0.roa
File:                     9qa0lfnRHt18P86Ad0hKmcZMsy0.roa (raw, json)
Hash identifier:          9dLL99fGCR2G1ypZ7qPG0EGzaJcyayAFWXvkSMhnO0c=
Subject key identifier:   F6:A6:B4:95:F9:D1:1E:DD:7C:3F:CE:80:77:48:4A:99:C6:4C:B3:2D
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0183C2279237B2F3A7A9037D04DF48E46962
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9qa0lfnRHt18P86Ad0hKmcZMsy0.roa
Signing time:             Mon 10 Oct 2022 13:48:36 +0000
ROA not before:           Mon 10 Oct 2022 13:48:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9125
IP address blocks:        188.255.136.0/21 maxlen: 21
                          188.255.139.0/24 maxlen: 24
                          188.255.137.0/24 maxlen: 24
                          188.255.133.0/24 maxlen: 24
                          188.255.142.0/23 maxlen: 23
                          188.255.144.0/20 maxlen: 20
                          188.255.145.0/24 maxlen: 24
                          193.107.4.0/22 maxlen: 22
                          188.255.204.0/24 maxlen: 24
                          188.255.201.0/24 maxlen: 24
                          188.255.203.0/24 maxlen: 24
                          188.255.202.0/24 maxlen: 24
                          109.121.16.0/20 maxlen: 20
                          109.121.12.0/22 maxlen: 22
                          188.255.211.0/24 maxlen: 24
                          188.255.209.0/24 maxlen: 24
                          109.121.30.0/24 maxlen: 24
                          188.255.214.0/24 maxlen: 24
                          188.255.221.0/24 maxlen: 24
                          188.255.223.0/24 maxlen: 24
                          188.255.220.0/24 maxlen: 24
                          188.255.222.0/23 maxlen: 23
                          188.255.224.0/22 maxlen: 22
                          109.121.32.0/21 maxlen: 21
                          188.255.232.0/22 maxlen: 22
                          109.121.44.0/23 maxlen: 23
                          109.121.40.0/22 maxlen: 22
                          188.255.230.0/23 maxlen: 24
                          188.255.233.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.240.0/23 maxlen: 23
                          109.121.48.0/21 maxlen: 21
                          109.121.46.0/23 maxlen: 23
                          188.255.242.0/23 maxlen: 23
                          109.121.56.0/22 maxlen: 22
                          109.121.60.0/22 maxlen: 22
                          188.255.249.0/24 maxlen: 24
                          188.255.152.0/21 maxlen: 24
                          188.255.148.0/22 maxlen: 24
                          188.255.146.0/23 maxlen: 24
                          188.255.160.0/20 maxlen: 20
                          188.255.176.0/20 maxlen: 20
                          188.255.185.0/24 maxlen: 24
                          188.255.181.0/24 maxlen: 24
                          188.255.186.0/23 maxlen: 23
                          188.255.189.0/24 maxlen: 24
                          188.255.188.0/24 maxlen: 24
                          109.121.0.0/18 maxlen: 18
                          188.255.194.0/24 maxlen: 24
                          109.121.8.0/22 maxlen: 22
                          188.255.196.0/22 maxlen: 22
                          93.186.79.0/24 maxlen: 24
                          178.253.192.0/21 maxlen: 21
                          178.253.204.0/23 maxlen: 23
                          178.253.200.0/22 maxlen: 22
                          178.253.206.0/24 maxlen: 24
                          178.253.208.0/23 maxlen: 23
                          178.253.211.0/24 maxlen: 24
                          178.253.219.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.224.0/21 maxlen: 21
                          178.253.220.0/23 maxlen: 23
                          178.253.223.0/24 maxlen: 24
                          93.186.70.0/24 maxlen: 24
                          93.186.66.0/24 maxlen: 24
                          93.186.73.0/24 maxlen: 24
                          178.253.232.0/23 maxlen: 23
                          178.253.239.0/24 maxlen: 24
                          178.253.234.0/24 maxlen: 24
                          109.233.186.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          178.253.242.0/24 maxlen: 24
                          178.253.241.0/24 maxlen: 24
                          109.233.191.0/24 maxlen: 24
                          109.233.187.0/24 maxlen: 24
                          109.233.188.0/24 maxlen: 24
                          178.253.251.0/24 maxlen: 24
                          178.253.247.0/24 maxlen: 24
                          178.253.252.0/22 maxlen: 22
                          81.18.50.0/24 maxlen: 24
                          178.253.248.0/23 maxlen: 23
                          81.18.58.0/24 maxlen: 24
                          81.18.54.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          81.18.62.0/24 maxlen: 24
                          81.18.59.0/24 maxlen: 24
                          81.18.60.0/24 maxlen: 24
                          178.219.0.0/22 maxlen: 22
                          178.219.10.0/24 maxlen: 24
                          178.219.12.0/23 maxlen: 23
                          178.219.14.0/24 maxlen: 24
                          77.105.13.0/24 maxlen: 24
                          77.105.12.0/24 maxlen: 24
                          77.105.14.0/24 maxlen: 24
                          77.105.16.0/20 maxlen: 20
                          77.105.15.0/24 maxlen: 24
                          77.105.17.0/24 maxlen: 24
                          77.105.23.0/24 maxlen: 24
                          77.105.24.0/24 maxlen: 24
                          77.105.20.0/24 maxlen: 24
                          77.105.21.0/24 maxlen: 24
                          77.105.30.0/24 maxlen: 24
                          77.105.29.0/24 maxlen: 24
                          77.105.27.0/24 maxlen: 24
                          77.105.26.0/24 maxlen: 24
                          77.105.28.0/24 maxlen: 24
                          77.105.25.0/24 maxlen: 24
                          77.105.36.0/23 maxlen: 23
                          77.105.36.0/22 maxlen: 22
                          77.105.32.0/22 maxlen: 22
                          77.105.38.0/24 maxlen: 24
                          77.105.44.0/24 maxlen: 24
                          77.105.43.0/24 maxlen: 24
                          77.105.40.0/24 maxlen: 24
                          77.105.42.0/24 maxlen: 24
                          77.105.41.0/24 maxlen: 24
                          77.105.48.0/20 maxlen: 20
                          77.105.46.0/23 maxlen: 23
                          77.105.45.0/24 maxlen: 24
                          77.105.0.0/24 maxlen: 24
                          77.105.0.0/22 maxlen: 22
                          77.105.10.0/24 maxlen: 24
                          77.105.5.0/24 maxlen: 24
                          77.105.7.0/24 maxlen: 24
                          77.105.8.0/23 maxlen: 23
                          46.16.104.0/21 maxlen: 21
                          212.69.17.0/24 maxlen: 24
                          212.69.16.0/24 maxlen: 24
                          212.69.15.0/24 maxlen: 24
                          212.69.20.0/24 maxlen: 24
                          212.69.28.0/22 maxlen: 22
                          212.69.28.0/23 maxlen: 23
                          212.69.31.0/24 maxlen: 24
                          194.28.131.0/24 maxlen: 24
                          194.28.129.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.8.0/23 maxlen: 23
                          79.175.97.0/24 maxlen: 24
                          79.175.94.0/24 maxlen: 24
                          79.175.96.0/22 maxlen: 22
                          79.175.98.0/23 maxlen: 23
                          79.175.92.0/23 maxlen: 24
                          79.175.102.0/24 maxlen: 24
                          79.175.104.0/21 maxlen: 24
                          79.175.100.0/23 maxlen: 24
                          79.175.111.0/24 maxlen: 24
                          79.175.112.0/24 maxlen: 24
                          79.175.114.0/24 maxlen: 24
                          79.175.116.0/24 maxlen: 24
                          79.175.113.0/24 maxlen: 24
                          79.175.119.0/24 maxlen: 24
                          79.175.120.0/22 maxlen: 22
                          79.175.125.0/24 maxlen: 24
                          79.175.124.0/24 maxlen: 24
                          79.175.121.0/24 maxlen: 24
                          188.215.228.0/24 maxlen: 24
                          79.175.123.0/24 maxlen: 24
                          79.175.122.0/24 maxlen: 24
                          79.175.126.0/23 maxlen: 24
                          188.255.255.0/24 maxlen: 24
                          79.175.64.0/23 maxlen: 24
                          79.175.64.0/21 maxlen: 21
                          79.175.64.0/20 maxlen: 20
                          79.175.68.0/22 maxlen: 24
                          79.175.64.0/18 maxlen: 18
                          79.175.72.0/21 maxlen: 21
                          79.175.80.0/20 maxlen: 20
                          79.175.80.0/21 maxlen: 24
                          79.175.88.0/22 maxlen: 24
                          80.74.160.0/20 maxlen: 20
                          2a00:8100::/32 maxlen: 32
                          2a02:660::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c2:27:92:37:b2:f3:a7:a9:03:7d:04:df:48:e4:69:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Oct 10 13:48:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6a6b495f9d11edd7c3fce8077484a99c64cb32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:45:30:5b:a6:4d:c7:64:94:18:42:8c:29:
                    0d:f6:cb:72:8f:72:2c:6d:18:f3:73:0f:29:d5:0a:
                    18:70:59:03:dd:c5:40:f7:b1:bf:b2:f9:d2:dd:34:
                    13:4b:af:f3:6e:f6:6a:9d:46:32:3f:e0:c7:70:6a:
                    00:e8:05:b8:2e:b7:a6:e4:51:8d:44:3c:d3:bf:79:
                    81:96:01:f4:71:b1:df:89:07:2e:ed:02:ae:da:cb:
                    22:89:11:e5:7d:8d:82:81:e6:ac:19:9f:07:f3:5c:
                    4d:71:c8:9e:95:35:dc:c4:31:7f:6d:e3:77:15:16:
                    a9:0c:20:32:a9:18:7b:bd:ff:77:e7:36:4b:d3:1b:
                    01:b0:eb:86:06:66:d4:08:1c:6b:a0:35:74:c7:34:
                    ed:15:d7:57:55:8c:40:38:72:ec:24:16:6b:2a:9a:
                    36:15:2b:a9:2a:2a:22:34:c4:98:ed:69:27:65:b0:
                    fa:94:fc:e0:41:7f:08:f6:3c:55:8a:af:92:76:47:
                    d8:b2:44:55:e9:f5:26:de:50:69:7d:c6:dc:84:2c:
                    f3:89:7a:16:79:14:ae:ed:0c:bf:53:b2:fd:04:85:
                    6d:7d:11:00:a9:ae:35:23:3c:37:9d:22:d9:2e:b7:
                    df:2e:e9:7c:e6:1c:c6:1a:10:ea:e2:d3:e3:25:29:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:B4:95:F9:D1:1E:DD:7C:3F:CE:80:77:48:4A:99:C6:4C:B3:2D
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9qa0lfnRHt18P86Ad0hKmcZMsy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.104.0/21
                  77.105.0.0/22
                  77.105.5.0/24
                  77.105.7.0-77.105.10.255
                  77.105.12.0-77.105.63.255
                  79.175.64.0/18
                  80.74.160.0/20
                  81.18.50.0/24
                  81.18.54.0/24
                  81.18.58.0-81.18.60.255
                  81.18.62.0/23
                  93.186.66.0/24
                  93.186.70.0/24
                  93.186.73.0/24
                  93.186.79.0/24
                  109.121.0.0/18
                  109.233.186.0-109.233.188.255
                  109.233.191.0/24
                  178.219.0.0/22
                  178.219.10.0/24
                  178.219.12.0-178.219.14.255
                  178.253.192.0-178.253.206.255
                  178.253.208.0/23
                  178.253.211.0/24
                  178.253.217.0/24
                  178.253.219.0-178.253.221.255
                  178.253.223.0-178.253.234.255
                  178.253.239.0/24
                  178.253.241.0-178.253.242.255
                  178.253.246.0-178.253.249.255
                  178.253.251.0-178.253.255.255
                  188.215.228.0/24
                  188.255.133.0/24
                  188.255.136.0-188.255.191.255
                  188.255.194.0/24
                  188.255.196.0/22
                  188.255.201.0-188.255.204.255
                  188.255.209.0/24
                  188.255.211.0/24
                  188.255.214.0/24
                  188.255.220.0-188.255.228.255
                  188.255.230.0-188.255.235.255
                  188.255.240.0/22
                  188.255.249.0/24
                  188.255.255.0/24
                  193.107.4.0/22
                  194.28.129.0/24
                  194.28.131.0/24
                  212.69.2.0/24
                  212.69.8.0/23
                  212.69.15.0-212.69.17.255
                  212.69.20.0/24
                  212.69.28.0/22
                IPv6:
                  2a00:8100::/32
                  2a02:660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:bd:a4:af:d1:e5:7d:30:a9:8c:91:45:77:23:0a:a4:86:
         d0:26:06:40:34:89:22:33:93:6d:ca:e5:f6:e0:d3:a9:9e:47:
         6c:f1:3c:b9:51:bf:82:df:a8:b5:7b:ba:c8:49:7c:0c:8b:b7:
         c3:a1:b2:2e:95:db:2c:0c:ef:25:9a:42:12:9b:66:54:b6:b8:
         c6:fa:72:7f:f3:86:8c:3a:31:70:39:68:5c:63:c1:36:93:6f:
         4d:f7:58:ac:4a:c5:ec:f8:dd:2b:d5:dd:32:8c:7d:eb:22:89:
         5a:b5:eb:0f:79:e9:00:dc:5a:b3:6f:ec:93:5c:99:70:bf:3c:
         6f:5b:b7:65:25:e8:48:f5:1c:36:70:1e:ff:d4:0b:dc:d3:07:
         14:96:3c:62:14:dc:80:93:fa:78:b8:7a:db:8a:7a:f5:3f:91:
         03:e7:41:5d:44:99:1d:4d:63:36:fc:62:1c:0e:78:32:57:8a:
         83:5e:d7:cc:98:99:b0:0f:9e:97:7e:a7:fb:e9:3e:b8:8f:ac:
         36:a5:84:91:00:50:5d:79:bb:25:67:b6:77:75:04:e3:ce:b2:
         aa:da:e2:df:87:f3:0e:6a:dd:2c:17:0e:0c:9c:6a:50:0b:19:
         80:c4:c2:21:8c:af:5d:2c:d1:dc:d6:fe:46:c5:05:1f:a5:e6:
         0a:94:f4:be
-----BEGIN CERTIFICATE-----
MIIG1DCCBbygAwIBAgISAYPCJ5I3svOnqQN9BN9I5GliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIxMDEwMTM0ODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmE2YjQ5NWY5ZDExZWRkN2MzZmNlODA3NzQ4NGE5OWM2NGNiMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb9FMFumTcdklBhCjCkN9styj3Is
bRjzcw8p1QoYcFkD3cVA97G/svnS3TQTS6/zbvZqnUYyP+DHcGoA6AW4Lrem5FGN
RDzTv3mBlgH0cbHfiQcu7QKu2ssiiRHlfY2CgeasGZ8H81xNccielTXcxDF/beN3
FRapDCAyqRh7vf935zZL0xsBsOuGBmbUCBxroDV0xzTtFddXVYxAOHLsJBZrKpo2
FSupKioiNMSY7WknZbD6lPzgQX8I9jxViq+SdkfYskRV6fUm3lBpfcbchCzziXoW
eRSu7Qy/U7L9BIVtfREAqa41Izw3nSLZLrffLul85hzGGhDq4tPjJSl/OwIDAQAB
o4ID4DCCA9wwHQYDVR0OBBYEFPamtJX50R7dfD/OgHdISpnGTLMtMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvOXFhMGxmblJIdDE4UDg2QWQwaEttY1pNc3kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB9AYIKwYBBQUHAQcBAf8EggHjMIIB3zCCAcUEAgABMIIB
vQMEAy4QaAMEAk1pAAMEAE1pBTAMAwQATWkHAwQATWkKMAwDBAJNaQwDBAZNaQAD
BAZPr0ADBARQSqADBABREjIDBABREjYwDAMEAVESOgMEAFESPAMEAVESPgMEAF26
QgMEAF26RgMEAF26SQMEAF26TwMEBm15ADAMAwQBbem6AwQAbem8AwQAbem/AwQC
stsAAwQAstsKMAwDBAKy2wwDBACy2w4wDAMEBrL9wAMEALL9zgMEAbL90AMEALL9
0wMEALL92TAMAwQAsv3bAwQBsv3cMAwDBACy/d8DBACy/eoDBACy/e8wDAMEALL9
8QMEALL98jAMAwQBsv32AwQBsv34MAsDBACy/fsDAwGy/AMEALzX5AMEALz/hTAM
AwQDvP+IAwQGvP+AAwQAvP/CAwQCvP/EMAwDBAC8/8kDBAC8/8wDBAC8/9EDBAC8
/9MDBAC8/9YwDAMEArz/3AMEALz/5DAMAwQBvP/mAwQCvP/oAwQCvP/wAwQAvP/5
AwQAvP//AwQCwWsEAwQAwhyBAwQAwhyDAwQA1EUCAwQB1EUIMAwDBADURQ8DBAHU
RRADBADURRQDBALURRwwFAQCAAIwDgMFACoAgQADBQAqAgZgMA0GCSqGSIb3DQEB
CwUAA4IBAQBc3r2kr9HlfTCpjJFFdyMKpIbQJgZANIkiM5NtyuX24NOpnkds8Ty5
Ub+C36i1e7rISXwMi7fDobIuldssDO8lmkISm2ZUtrjG+nJ/84aMOjFwOWhcY8E2
k29N91isSsXs+N0r1d0yjH3rIolatesPeekA3Fqzb+yTXJlwvzxvW7dlJehI9Rw2
cB7/1Avc0wcUljxiFNyAk/p4uHrbinr1P5ED50FdRJkdTWM2/GIcDngyV4qDXtfM
mJmwD56Xfqf76T64j6w2pYSRAFBdebslZ7Z3dQTjzrKq2uLfh/MOat0sFw4MnGpQ
CxmAxMIhjK9dLNHc1v5GxQUfpeYKlPS+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org